Secure IoT devices and networks

1 August 2020 Cyber Security

Check Point Software Technologies introduced its Internet of Things (IoT) Protect solution to secure both IoT devices and networks in smart building, smart city, healthcare, industrial and critical infrastructure environments against all types of advanced Gen VI cyber threats. The solution delivers threat prevention and security management capabilities to block even unknown cyber-attacks at both IoT network and IoT device level, using threat intelligence and innovative IoT-specific security services.

The majority of organisations across the commercial, industrial, healthcare and utility sectors have deployed IoT and operational technology (OT) solutions, but this has significantly increased their cyber-risk. Many IoT devices have vulnerabilities and cannot be patched, or use insecure communications protocols. In addition, organisations have diverse estates of devices from multiple vendors, with many shadow devices that are unmanaged and connected to networks without authorisation, so organisations have limited visibility and control of devices and their associated risks.

A recent Check Point survey highlighted these issues: 90% of respondents reported their organisations have shadow IoT devices on their networks, with 44% stating that at least half of their IoT devices were connected without the IT or security teams’ knowledge. Just 11% of respondents stated they had fully implemented an IoT security solution, and 52% have no IoT security deployed at all.

As a result, 67% of enterprises and 82% of healthcare firms have experienced IoT-related incidents. These growing attacks against IoT devices and networks, combined with the rapid move to remote working enforced by the COVID-19 pandemic, demand the most advanced, comprehensive security fabric that can identify vulnerable IoT devices, apply protection, and stop evasive cyber threats.

“The number of IoT devices connected to the Internet continues to accelerate and will be 41,6 billion by 2025. Cyber criminals are targeting IoT devices across all industries including medical, industrial, smart building, smart office, so enterprises are making security a high priority. Given the huge volume and variety of IoT devices, organisations need an easy way to deploy security.” said Robyn Westervelt, IDC’s research director, Security & Trust. Check Point’s IoT Protect security solution uses automation and threat intelligence to provide device risk assessment, network segmentation, and threat prevention from the most sophisticated cyber-attacks.

IoT Protect gives network-level security and policy management together with Check Point security gateways, and IoT Protect Nano-Agents, which enable on-device runtime protection. It integrates with the industry’s leading IoT asset discovery platforms across the healthcare, industrial, smart office and smart building sectors to secure hundreds of thousands of IoT devices. The solution delivers:

• Complete IoT device visibility and risk analysis: it identifies and classifies IoT devices on any network through integrations with the leading discovery engines, to expose risks such as weak passwords, outdated firmware and known vulnerabilities.

• Vulnerability mitigation and zero-day threat prevention even on unpatchable devices: IoT devices can be ‘virtually patched’ to fix security flaws, even those with unpatchable firmware or legacy operating systems. IoT Protect features 60 IoT-specific security services to identify and stop unauthorised access and traffic to and from devices and servers, and to prevent IoT-targeted malware attacks. The unique IoT Defense Nano-Agent can also be embedded on devices to give built-in zero-day prevention.

• Intuitive Zero Trust network segmentation and management: the solution applies and enforces granular security rules across the entire IoT network fabric based on device attributes, risks and protocols, and supports holistic security policy management in a single pane of glass for both IT and IoT networks.

“From IP cameras to smart elevators, medical devices and industrial controllers, many IoT devices are inherently vulnerable and easy to hack. But securing these growing networks of devices is extremely challenging because of their diversity – which means organisations themselves are extremely vulnerable to attacks,” said Itai Greenberg, vice president, Product Management at Check Point. “IoT Protect is unique in giving organisations a complete, end-to-end security fabric that protects at both the network and device level, and is easy to set up and manage. This enables even legacy, unpatchable devices to be protected against various types of attack or exploitation, preventing disruption and damage to critical processes.”

IoT Protect offers the industry’s largest IoT discovery ecosystem to secure hundreds of thousands of IoT devices. Check Point maintains an open framework of technology partners specialising in the discovery and classification of IoT devices in a variety of verticals. With some of which, agreements were signed that allow Check Point’s customers to get an end-to-end solution. These partners include as of today Armis, MediGate, Claroty and Ordr. IoT Protect supports over 1600 IoT and operational technology (OT) protocols, applications and commands out of the box, and enables compliance best practices for regulations including HIPAA, NERC CIP, GDPR and many others.

IoT Protect is available immediately. Full details are available from https://www.checkpoint.com/products/iot-security/


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cyber Talent: It is more about Talent than Cyber
Issue 7 2020 , Cyber Security
Four million trained workers are needed to fully bridge the skills gap in the cybersecurity field around the world and properly defend organisations against threat actors.

Read more...
Increased cloud visibility and security
Issue 7 2020 , Cyber Security
Sophos adds cloud visibility features from Cloud Optix to Intercept X Advanced for Server with EDR.

Read more...
Ransomware and customer loyalty
Issue 7 2020 , Cyber Security
Arcserve research uncovers links between ransomware, consumer purchasing behaviour and brand loyalty.

Read more...
IoT will transform industrial security
Issue 7 2020, Kaspersky , Cyber Security
55% of organisations globally are confident the Internet of Things will change the state of security in industrial control systems (ICS).

Read more...
BYOD: bring your own danger
Issue 7 2020 , Cyber Security
Five cybersecurity threats that jeopardise the security of mobile devices and the keys to optimising their protection in a connected world.

Read more...
The arms race of AI in cybersecurity
CCTV Handbook 2020, Axis Communications SA , Cyber Security
Cybersecurity goes further than network video and audio, but these are as likely to be targeted as much as any network-connected device.

Read more...
From the editor's desk: The more things stay the same
CCTV Handbook 2020, Technews Publishing , News
It is rather redundant to say that the surveillance industry is going through significant changes and that there are some incredible advances in technology happening. You can read about a small number ...

Read more...
There’s an app for that (your camera)
CCTV Handbook 2020, Technews Publishing , CCTV, Surveillance & Remote Monitoring
In last year’s CCTV Handbook we looked at an organisation named Security & Safety Things (S&ST) and its goal of developing an open operating system (OS) for surveillance cameras based on the Android Open ...

Read more...
The future of open standards
CCTV Handbook 2020, Milestone Systems, Technews Publishing, Avigilon , Editor's Choice
Despite the many benefits of open standards, some companies still produce proprietary solutions. Are the surveillance and broader security markets still committed to open standards?

Read more...
The impact of AI on surveillance
CCTV Handbook 2020, Technews Publishing, Axis Communications SA, Hikvision South Africa, Cathexis Technologies, Dahua Technology South Africa , Editor's Choice
Artificial intelligence is a popular buzzword in the security industry that has us expecting real-life science fiction, but what is its real impact?

Read more...